██████╗ ███╗ ███╗ █████╗ ██████╗ ██████╗ ██╔══██╗████╗ ████║██╔══██╗██╔══██╗██╔════╝ ██║ ██║██╔████╔██║███████║██████╔╝██║ ██║ ██║██║╚██╔╝██║██╔══██║██╔══██╗██║ ██████╔╝██║ ╚═╝ ██║██║ ██║██║ ██║╚██████╗ ╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═╝ ╚═════╝
This free tool helps you build valid DMARC, SPF, and DKIM DNS TXT records for your domain. Proper email authentication prevents spoofing, improves deliverability, and protects your brand from phishing attacks. Since February 2024, Google and Yahoo require DMARC for bulk email senders.
Configure your DMARC policy (none, quarantine, reject), set alignment modes, configure aggregate and forensic reporting, and generate a valid TXT record ready to paste into your DNS. The builder validates your record and warns about common mistakes.
Build SPF records using a visual mechanism editor. One-click presets for Google Workspace, Microsoft 365, SendGrid, Mailchimp, Amazon SES, and Zoho Mail. Add custom IP ranges, includes, and MX mechanisms. The validator checks for the 10-lookup limit and syntax errors.
Generate DKIM DNS records with your selector and public key. Supports RSA and Ed25519 key types. Common selector presets for major email providers. The tool formats the record correctly for DNS publication.
Commercial DMARC platforms charge monthly fees for monitoring dashboards. This tool is a focused record builder that generates valid DNS records instantly. No account required, no data sent to any server, no cost. Build your records, paste them into DNS, and verify with a lookup tool.
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a DNS TXT record that tells receiving mail servers what to do when an email fails SPF or DKIM checks. It protects your domain from spoofing and phishing. Google and Yahoo require DMARC for bulk email senders since February 2024.
SPF (Sender Policy Framework) is a DNS TXT record listing which servers can send email for your domain. It uses mechanisms like include, ip4, ip6, a, and mx. Receiving servers check SPF to detect spoofing.
DKIM (DomainKeys Identified Mail) uses a DNS TXT record to publish a public key. The sending server signs emails with a private key, and receivers verify the signature against the public key in DNS, ensuring the message was not tampered with.
Completely free — no account, no subscription, no ads, no data collection. Unlike EasyDMARC, Dmarcian, or MxToolbox which require accounts or charge for features, this generates records entirely in your browser with no signup and no paywalls.
Yes. SPF verifies the sending server, DKIM verifies message integrity, and DMARC ties them together with a policy. All three are needed for maximum email security and deliverability.
Start with p=none to monitor without affecting delivery. After reviewing reports and confirming legitimate senders pass, move to p=quarantine, then p=reject for full protection.
Copy the generated record and add it as a TXT record in your DNS provider (Cloudflare, Route 53, GoDaddy, Namecheap, etc.). DMARC host: _dmarc. SPF host: @. DKIM host: selector._domainkey. Propagation takes minutes to 48 hours.
EasyDMARC and Dmarcian are full monitoring platforms with monthly fees. MxToolbox paywalls advanced features. This is a focused record builder — generates valid DNS records instantly with no account and no cost.